Re: Process ID Mismatch in Audit and RedoLogs

Notice that for the audit trail entry, the "image" is "oracle_at_top420", while for the redo log entry the "OS_program_name" is "sqlplus_at_top420"...

So, both seem to be correct, just for the different halves of the "two-task" connection...

on 3/11/05 1:14 PM, Rajesh.Rao_at_jpmchase.com at Rajesh.Rao_at_jpmchase.com wrote:

> Hello All,
>
> I connected as sysdba to my 9.2.0.5.0 database, and executed a few
> statements. Here's what's in the audit trail log
> (audit_sys_operations=TRUE).
>
> Oracle process number: 931
> Unix process pid: 28421, image: oracle_at_top420 (TNS V1-V3)
>
> Thu Mar 6 07:35:01 2005
> ACTION : 'CONNECT'
> DATABASE USER: '/'
> PRIVILEGE : SYSDBA
> CLIENT USER: oracle
> CLIENT TERMINAL: pts/2
> STATUS: 0
>
> Thu Mar 6 07:40:48 2005
> ACTION : 'update scott.emp set JOIN_DATE = '07-JAN-05' where EMP_ID =
> 4256'
> DATABASE USER: '/'
> PRIVILEGE : SYSDBA
> CLIENT USER: oracle
> CLIENT TERMINAL: pts/2
> STATUS: 0
>
> Now, notice that the process number as per the trace file is 28421. Then, I
> analyzed the archive log files using LogMiner, and under session info, for
> the same statement, I see "login_username=SYS client_info=
> OS_username=oracle Machine_name=top420 OS_terminal =pts/2
> OS_process_id=28411 OS_program name=sqlplus_at_top420 (TNS V1-V3)"
>
> So, as per LogMiner and the redo logs, the process number is 28411, whereas
> as per the audit trace files, it is 28421. Who's reporting it wrong?
>
> Regards
> Raj
>
>
> --
> http://www.freelists.org/webpage/oracle-l
>

--
http://www.freelists.org/webpage/oracle-l